CVE-2023-37239: Infoleak
Published Jul 6, 2023
·Updated
Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.
Affected Software
5 affected components
Huawei Emui=12.0.1
Huawei Emui=13.0.0
Huawei Harmonyos=2.0.1
Huawei Harmonyos=3.0.0
Huawei Harmonyos=3.1.0
Event History
Jul 6, 2023
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
DescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37239?
CVE-2023-37239 is considered a high-severity vulnerability due to its potential to crash affected programs.
2
How do I fix CVE-2023-37239?
To fix CVE-2023-37239, apply the latest security patches provided by Huawei for affected versions of Emui and HarmonyOS.
3
What software is affected by CVE-2023-37239?
CVE-2023-37239 affects specific versions of Huawei Emui 12.0.1, 13.0.0 and HarmonyOS 2.0.1, 3.0.0, 3.1.0.
4
What can happen if CVE-2023-37239 is exploited?
If exploited, CVE-2023-37239 can allow attackers to crash the distributed file system program.
5
Who is at risk from CVE-2023-37239?
Users of Huawei devices running the specified versions of Emui and HarmonyOS are at risk from CVE-2023-37239.